Description
WebSSH for iOS 14.16.10 contains a denial of service vulnerability in the mashREPL tool that allows attackers to crash the application by pasting malformed input. Attackers can trigger the vulnerability by copying a 300-character buffer of repeated 'A' characters into the mashREPL input field, causing the application to crash.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WebSSH | WebSSH for iOS | 14.16.10 | — |
References
- ExploitDB-49883 exploit
- WebSSH iOS App Store Page product
- VulnCheck Advisory: WebSSH for iOS 14.16.10 - 'mashREPL' Denial of Service third-party-advisory